From da1170a530b24c440d64c13ed2e661c9d4941237 Mon Sep 17 00:00:00 2001
From: Andrew Nacin <nacin@git.wordpress.org>
Date: Wed, 28 Apr 2010 02:17:19 +0000
Subject: [PATCH] Show the sanitized username on install.php completion page.
 Also add some help text. see #13159.

git-svn-id: https://develop.svn.wordpress.org/trunk@14264 602fd350-edb4-49c9-b593-d223f7449a82
---
 wp-admin/install.php | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/wp-admin/install.php b/wp-admin/install.php
index 5fa3780572..93a9148071 100644
--- a/wp-admin/install.php
+++ b/wp-admin/install.php
@@ -104,7 +104,9 @@ function display_setup_form( $error = null ) {
 			if ( $user_table ) {
 				_e('User(s) already exists.');
 			} else {
-				?><input name="user_name" type="text" id="user_login" size="25" value="<?php echo esc_attr( $user_name ); ?>" /><?php
+				?><input name="user_name" type="text" id="user_login" size="25" value="<?php echo esc_attr( sanitize_user( $user_name, true ) ); ?>" />
+				<p><?php _e( 'Usernames can have only alphanumeric characters, spaces, underscores, hyphens, periods and the @ symbol.' ); ?></p>
+			<?php
 			} ?>
 			</td>
 		</tr>
@@ -218,7 +220,7 @@ switch($step) {
 <table class="form-table">
 	<tr>
 		<th><?php _e( 'Username' ); ?></th>
-		<td><code><?php echo esc_html($user_name); ?></code></td>
+		<td><code><?php echo esc_html( sanitize_user( $user_name, true ) ); ?></code></td>
 	</tr>
 	<tr>
 		<th><?php _e( 'Password' ); ?></th>